Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-35333. PoCs published by Lukas Johannes Moeller, JohannesLks.
AI-analyzed exploit summary This exploit demonstrates a pre-authentication denial-of-service (DoS) vulnerability in strongSwan's RADIUS DAE plugin by sending a malformed RADIUS Access-Request packet with a zero-length attribute, causing an infinite loop in the worker thread.
Description
strongSwan 5.9.13 - DoS
Exploits (2)
This exploit demonstrates a pre-authentication denial-of-service (DoS) vulnerability in strongSwan's RADIUS DAE plugin by sending a malformed RADIUS Access-Request packet with a zero-length attribute, causing an infinite loop in the worker thread.
This repository contains a functional exploit for CVE-2026-35333, a DoS vulnerability in strongSwan's RADIUS attribute parser. The PoC sends a crafted RADIUS Access-Request packet with a zero-length attribute to trigger an infinite loop in the attribute enumerator, causing a worker thread to hang indefinitely.